Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
File:                     EN06cveQsl7j0imsmfaacb8dgpQ.mft (raw, json)
Hash identifier:          uuz3aVSztAwpOTEVBlQnWfvgvhWXllRgm3JmGYRWmkc=
Subject key identifier:   6A:8D:BB:9F:5E:F1:BF:E2:AA:DD:8B:35:33:63:48:6F:55:E0:1E:DC
Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
Certificate issuer:       /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Certificate serial:       0194BD4E5822D1A510FAA680831CD15E3C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 17:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:15 +0000
Files and hashes:         1: EN06cveQsl7j0imsmfaacb8dgpQ.crl (hash: Tt3/3ZcgTjJX0WdPranT7G89wWEPKBlyZn7IIi/P7sI=)
                          2: c5PalyNSyST_aAI1KT3QGDFOwJs.roa (hash: mO2ZdsVC3fTegCqI2v7PXch94it/WJD1mL1+9bQtLsY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:58:22:d1:a5:10:fa:a6:80:83:1c:d1:5e:3c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
        Validity
            Not Before: Jan 31 17:00:15 2025 GMT
            Not After : Feb  1 17:00:15 2025 GMT
        Subject: CN=6a8dbb9f5ef1bfe2aadd8b353363486f55e01edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:68:42:4a:2c:01:74:4f:6c:64:d8:9d:2e:
                    9d:45:3b:95:cc:7e:e9:7e:3b:2c:fe:f6:34:d1:fd:
                    de:50:dc:4f:b1:f5:3f:aa:33:b0:47:ea:c6:8b:24:
                    7f:7d:48:27:9e:39:1d:60:3b:52:d7:01:96:a9:b0:
                    6b:55:27:36:29:5b:d6:6b:9e:b5:70:07:31:e4:a8:
                    ec:4f:5a:cb:29:c8:4e:34:9c:b0:b4:ba:a8:5e:a1:
                    61:d6:b0:6a:92:2c:ed:51:d2:ff:ea:41:00:da:85:
                    3e:9c:55:7f:f8:44:11:92:58:68:ec:b0:22:1f:94:
                    85:9e:9f:64:66:2b:19:a7:e0:90:b1:2f:98:7c:45:
                    f3:61:00:8d:ff:32:d5:80:5e:0e:b5:00:ba:bd:b5:
                    ef:89:d4:33:48:1c:91:6b:56:e9:c6:fb:d9:5c:22:
                    99:38:40:6a:ce:30:12:44:96:4f:f1:f7:a8:82:bb:
                    30:e3:d1:cf:c9:3c:80:28:c5:5e:be:7c:e1:21:09:
                    9d:45:d7:c0:bd:b9:84:2a:14:72:a1:55:48:26:63:
                    ce:2d:1b:31:57:79:42:75:30:e5:f7:51:91:35:0b:
                    63:f9:f5:ea:47:95:18:64:ad:f6:82:b8:45:94:d7:
                    87:fb:84:66:f1:3d:7e:76:df:15:77:5c:01:85:9d:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8D:BB:9F:5E:F1:BF:E2:AA:DD:8B:35:33:63:48:6F:55:E0:1E:DC
            X509v3 Authority Key Identifier:
                keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:32:c2:17:fa:75:90:ec:7b:7d:67:f1:35:85:2e:b9:d5:db:
         52:8f:78:cd:a6:29:af:3e:6e:6c:24:02:c4:bc:61:4f:7b:6f:
         63:8b:5a:48:6b:94:54:7c:86:2e:ac:ad:24:fd:5d:6b:87:0b:
         03:95:6b:89:e3:4b:f9:ca:5d:a1:5c:a9:35:61:b8:39:a4:40:
         3f:d0:3a:75:20:ea:d0:5f:9f:7a:1c:19:b0:72:5a:15:79:49:
         57:6b:92:6e:41:cd:59:73:8f:d9:8f:79:f8:b4:bf:e4:1a:5b:
         25:6b:d9:ac:a2:c2:29:6a:1f:a4:8c:65:89:8c:19:2d:4c:de:
         82:0c:3f:a5:2f:f7:a2:10:13:58:55:8b:60:f7:2c:1a:58:59:
         f6:13:99:fa:97:09:fc:3c:69:17:90:af:b3:fb:05:aa:8f:d1:
         76:9b:c0:41:fa:8f:89:19:ac:7f:c0:c4:ca:50:4c:c1:e9:9e:
         21:2c:f9:4b:3f:71:90:c6:75:75:e1:c6:11:d5:42:90:d0:54:
         a5:d2:a2:ea:92:01:cb:dd:94:9f:da:c6:16:e5:c9:77:b3:8a:
         05:b2:39:8e:ad:0a:bc:9a:06:27:ad:8a:5b:8d:42:42:eb:c1:
         dd:4c:28:26:4c:06:39:f4:2a:1f:ee:4a:44:7e:94:44:ab:bd:
         a2:0c:1f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:05 2025 by rpki-client